Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
File: TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json)
Hash identifier: Gw9uoTbUfiR1fB52CdfM07Lltir3+qb3dzbZYzLEZFo=
Subject key identifier: 51:35:0D:BB:28:F5:23:9B:10:D4:D4:BC:82:7A:2C:5A:4E:E4:74:CD
Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
Certificate issuer: /CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Certificate serial: 019CACB474C5963769C4E6BBA9B290FCB57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
Manifest number: 14D6
Signing time: Mon 02 Mar 2026 04:00:33 +0000
Manifest this update: Mon 02 Mar 2026 04:00:33 +0000
Manifest next update: Tue 03 Mar 2026 04:00:33 +0000
Files and hashes: 1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: OSIvXPIzROPEW6R9jEr1ywO1c8eBANBX4VkicAz3jdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:74:c5:96:37:69:c4:e6:bb:a9:b2:90:fc:b5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Validity
Not Before: Mar 2 04:00:33 2026 GMT
Not After : Mar 3 04:00:33 2026 GMT
Subject: CN=51350dbb28f5239b10d4d4bc827a2c5a4ee474cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:58:1b:96:d0:35:b1:a4:e7:ba:92:1a:d6:
d3:a1:80:6c:1f:34:be:51:1a:c1:9c:6d:a4:e8:d6:
89:1e:fd:90:65:ca:4c:3f:17:01:90:ff:3c:c6:70:
5c:45:31:02:c3:cb:36:95:4d:e0:0e:31:22:47:ee:
d1:79:41:9b:a2:27:a9:6f:a5:8f:89:46:a2:49:63:
49:5f:24:58:88:c8:66:be:44:c1:e9:fa:e1:7c:94:
52:33:43:53:f5:82:27:69:d5:c4:e9:45:64:b8:08:
c6:6e:a7:5b:27:4f:33:a7:8c:b6:d8:4b:7e:81:22:
e1:5e:12:d4:8f:2b:d3:62:76:10:7f:47:38:08:c3:
79:b5:85:17:d7:77:e6:6a:a9:66:f1:52:18:1c:3f:
08:23:05:f6:9c:4a:a5:df:e5:00:5b:5c:c2:27:cf:
04:1c:0d:18:9a:fb:06:fc:73:d6:4d:67:f6:66:53:
6e:66:b3:3b:3c:78:17:59:da:4b:b5:75:5e:0f:97:
ba:40:be:1d:bd:a4:fd:c5:84:f5:0e:7d:2b:e2:4d:
87:70:a5:fe:13:66:7d:b2:d1:1b:a4:17:3b:05:c1:
03:87:e8:24:a7:b5:68:25:68:3d:9e:39:bc:bd:b1:
e9:d4:95:2e:76:39:bc:97:eb:ab:d4:1a:3d:be:9c:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:0D:BB:28:F5:23:9B:10:D4:D4:BC:82:7A:2C:5A:4E:E4:74:CD
X509v3 Authority Key Identifier:
keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:b3:49:27:1d:0f:4c:59:4d:22:0c:f7:ea:96:62:87:79:
41:5a:c4:75:a6:94:e8:9f:82:28:c2:6c:28:9f:3c:7d:27:bd:
4c:71:c9:ae:a8:24:76:5c:66:f4:bd:79:e9:96:53:cd:91:d7:
d4:40:96:84:06:6f:bd:37:3f:ad:86:c6:e7:98:0b:7d:b5:ed:
48:f3:56:f2:03:01:98:ff:9a:b5:b8:d2:37:6a:1d:c3:7a:91:
f0:06:9d:45:c2:81:b8:58:d3:ab:33:ee:66:81:f1:4d:6d:a3:
69:3a:8a:b0:66:1d:13:3d:15:a7:ba:76:47:5e:8a:22:f9:ae:
25:fb:03:3e:23:e6:2d:3b:79:7f:d9:7d:76:be:49:68:cb:85:
03:fb:7c:ea:96:dc:89:82:b8:fa:59:1b:ce:db:a0:bf:5e:69:
3e:aa:ad:88:e8:ac:c3:76:ae:11:93:98:90:14:20:0e:57:04:
fa:4a:ee:1d:aa:37:6a:ba:5a:84:9d:78:16:af:33:7a:fe:f7:
9c:a3:75:e5:45:ac:b0:60:2b:90:80:81:fc:7a:06:de:f9:8c:
1a:9e:1f:51:19:37:df:6e:47:c5:ee:26:d4:0f:2a:da:d0:62:
48:ac:0b:2b:f1:73:c4:47:f0:b9:99:4a:6b:78:5c:68:dd:23:
ad:1f:7a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystHTFljdpxOa7qbKQ/LV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmI0MTk2OTU2YTQzMTUzNDBmODI3ZDk5MmEwZjdhMjky
ODRjM2UwHhcNMjYwMzAyMDQwMDMzWhcNMjYwMzAzMDQwMDMzWjAzMTEwLwYDVQQD
Eyg1MTM1MGRiYjI4ZjUyMzliMTBkNGQ0YmM4MjdhMmM1YTRlZTQ3NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfNYG5bQNbGk57qSGtbToYBsHzS+
URrBnG2k6NaJHv2QZcpMPxcBkP88xnBcRTECw8s2lU3gDjEiR+7ReUGboiepb6WP
iUaiSWNJXyRYiMhmvkTB6frhfJRSM0NT9YInadXE6UVkuAjGbqdbJ08zp4y22Et+
gSLhXhLUjyvTYnYQf0c4CMN5tYUX13fmaqlm8VIYHD8IIwX2nEql3+UAW1zCJ88E
HA0YmvsG/HPWTWf2ZlNuZrM7PHgXWdpLtXVeD5e6QL4dvaT9xYT1Dn0r4k2HcKX+
E2Z9stEbpBc7BcEDh+gkp7VoJWg9njm8vbHp1JUudjm8l+ur1Bo9vpx/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE1Dbso9SObENTUvIJ6LFpO5HTNMB8GA1UdIwQY
MBaAFE0rQZaVakMVNA+CfZkqD3opKEw+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUt
NDU1YTBhNjFmMWVhLzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUtNDU1YTBhNjFmMWVh
LzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1OzSScd
D0xZTSIM9+qWYod5QVrEdaaU6J+CKMJsKJ88fSe9THHJrqgkdlxm9L156ZZTzZHX
1ECWhAZvvTc/rYbG55gLfbXtSPNW8gMBmP+atbjSN2odw3qR8AadRcKBuFjTqzPu
ZoHxTW2jaTqKsGYdEz0Vp7p2R16KIvmuJfsDPiPmLTt5f9l9dr5JaMuFA/t86pbc
iYK4+lkbztugv15pPqqtiOisw3auEZOYkBQgDlcE+kruHao3arpahJ14Fq8zev73
nKN15UWssGArkICB/HoG3vmMGp4fURk3325Hxe4m1A8q2tBiSKwLK/FzxEfwuZlK
a3hcaN0jrR96WQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:56 2026 by rpki-client